LIVE FEED

CISA: every Flow Neuroscience FL-100 tDCS headset shares one hardcoded BLE credential, CVE-2026-18164 rated 8.1 Coalition for Health AI convenes 100 member cyber work group, AI attack and defense playbooks due by year end CRA Article 14 reporting obligations take effect September 11 EU MDR revision proposal adds a 30 day exploited-vulnerability reporting clock via Eudamed Mira hormone monitor cloud API handed session tokens to any password, CVE-2026-68067 rated 9.8 Pulsetto vagus nerve stimulator ships hidden BLE commands: no patch, no vendor response CISA: every Flow Neuroscience FL-100 tDCS headset shares one hardcoded BLE credential, CVE-2026-18164 rated 8.1 Coalition for Health AI convenes 100 member cyber work group, AI attack and defense playbooks due by year end CRA Article 14 reporting obligations take effect September 11 EU MDR revision proposal adds a 30 day exploited-vulnerability reporting clock via Eudamed Mira hormone monitor cloud API handed session tokens to any password, CVE-2026-68067 rated 9.8 Pulsetto vagus nerve stimulator ships hidden BLE commands: no patch, no vendor response

Threat Intel

455 healthcare ransomware incidents in 2025, and executives fear AI next

MedDevice Cyber Staff · Jan 26 · 3 min read · Via Health-ISAC

Health-ISAC's Annual Threat Report for 2026 documented 455 ransomware incidents against healthcare organizations globally in 2025, naming Qilin, INC Ransom and SafePay among the most active groups, and reported distributing more than 1,200 targeted alerts to the sector.

The techniques it flagged are the social-engineering wave: QR-code phishing, or quishing, plus ClickFix and FileFix. And its executive survey ranked AI-enabled attacks as the top emerging concern for 2026. The people running healthcare security have stopped treating AI threats as speculative and started budgeting for them.

For device makers, the report is a map of how attackers get in and what they hit. Read it as your postmarket threat intelligence, because your regulators increasingly expect you to.

Sources

Health-ISAC ↗

Questions & Answers

How many ransomware incidents hit healthcare in 2025?

Health-ISAC counted 455 globally in its 2026 Annual Threat Report, naming Qilin, INC Ransom and SafePay among the most active groups, with more than 1,200 targeted alerts distributed to the sector.

What attack techniques did the Health-ISAC report flag?

QR-code phishing, plus the ClickFix and FileFix social engineering waves. The executive survey ranked AI-enabled attacks as the top emerging concern for 2026.

← Back to Threat Intel

455 healthcare ransomware incidents in 2025, and executives fear AI next

Questions & Answers

How many ransomware incidents hit healthcare in 2025?

What attack techniques did the Health-ISAC report flag?

More Threat Intel